A critical authorization bypass in the MountDev AI MCP Connector plugin lets unauthenticated attackers mint an administrator-bound OAuth token and gain full control of affected WordPress sites.
What Is It
CVE-2026-15015 is a CVSS 9.8 (CRITICAL) authorization bypass affecting the MountDev AI MCP Connector for WordPress plugin. The plugin fails to properly verify that a user is authorized to perform an action (CWE-862, Missing Authorization). By combining a publicly accessible Dynamic Client Registration endpoint, which lets unauthenticated callers register arbitrary OAuth clients with an attacker-controlled redirect_uri, with an unprotected authorization endpoint, an attacker can complete the full OAuth flow without any administrator interaction. The result is an administrator-bound OAuth Bearer token obtained via a self-registered client.
Why It Matters
The vulnerability is network-exploitable with low attack complexity, requires no privileges, and needs no user interaction (AV:N/AC:L/PR:N/UI:N). A successful attack grants full administrator-equivalent access to the plugin's MCP tool surface and to all exposed WordPress content, users, and options; a complete compromise of confidentiality, integrity, and availability (C:H/I:H/A:H). Because exploitation requires no authentication and no admin involvement, exposed sites can be taken over at scale.
What's Vulnerable
- Vendor: cascadiawebservices
- Product: MountDev AI MCP Connector for WordPress plugin
- Affected versions: All versions up to and including 1.6.1
Patch Status
The supplied source material does not list a fixed version or a specific required remediation action. No CISA KEV entry was provided, so there is no confirmation of active exploitation in the supplied data. Administrators should consult the Wordfence advisory and plugin changeset (linked below) for remediation guidance and monitor for an updated release beyond 1.6.1.